conf t
acc 101 deny tcp any any eq 119
acc 101 deny tcp any eq 119 any
then apply it to an interface the person is on like this
int serial0/0
ip access-group 101 in
and there ya go, no nntp in either direction
the syntax for that is like this
acc 101 [permit or deny] [ip/tcp/udp/icmp] from frommask to tomask
eq ## can be thrown in after an address/mask to specify a port, 'any' is a
shortcut for '0.0.0.0 255.255.255.255'
search for the access-list command on cisco's website for better
documentation
On Sun, 2 Sep 2001, Tim wrote:
> Anyone know the EXACT command needed to block ALL NNTP (port 119) access to
> and from a network from a command prompt in a Cisco router?
>
> I have a customer who's network admin has hijacked a few of their servers
> (linux) and is using them to run a news server, ftp server and I want to
> shut them off by blocking them from the router which I do have the proper
> passwords for..where I don't for the linux boxes. And, I am 1800 miles away
> from either!
>
> Tim
>
>
>
>
>
>
> _______________________________________________________________
> Sent using Novelty Mail the FREE EMAIL SERVICE. Click here http://noveltymail.com to
>get your own free email using this or ANY of our fun domain names.
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
>
--
Edward Fahner
Systems Administrator, Planet Communications Network
(540)442-6677 x222 [aka. Akatosh .CU.Au, [EMAIL PROTECTED]]
DC2.DwGmL--WT--SksCre+\Cvi+BflA(+r-v+++)N^MH+$-Fj~R+Ac+++!J+S+U-I--#V+++Q+Tc++
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
